Add/improve unit tests for UserService, SessionService, and password validator

[ArchILLtect]

• Add/expand unit tests for UserService (updatePartial, normalizeEmail), SessionService (touch & expiry logic), and password validator.
• Raise coverage to ≥75% if feasible; fallback: keep gate at 70% and add delta report.
• Document coverage status in README.